home

update.ads4softupdate.xyz

Domain Information

Server location:
Ile-De-France, France (FR)

ASN:
AS12876 AS12876 ONLINE S.A.S., FR

Root domain:
ads4softupdate.xyz

Scanner detections:
Detections  (80% detected)

Scan engine
Details
Detections

Reason Heuristics
PUP.InstallCore.OOOKodIn.Installer (M)
80.00%

ESET NOD32
MSIL/TrojanDownloader.Adload.AZ trojan
20.00%

The domain update.ads4softupdate.xyz has been seen to resolve to the following IP address.

163.172.197.123
163-172-197-123.rev.poneytelecom.eu
June 5, 2016

File downloads found at URLs served by update.ads4softupdate.xyz.

1 / 68      (PUP)
http://update.ads4softupdate.xyz/dl.php?sas=L8Qvh1T1ybclQwAJiWpKlFbQ_ZrSjNjvMrKdzF1G2Sg.&cid=P23P5R4623944435464888511&sub=4175&conversion_id=14623944440638&app_id=4&lp_id=1600&v=tribat&stub_id=305&v_id=gg2V16Ixu9yhsGW5xfSM6xyuR3P3RPJho7iA1Yg2C0o.&lpp=w10*-*-*  (Flash.exe)

1 / 68      (inconclusive)
http://update.ads4softupdate.xyz/dl.php?vrtye=jeygx-faXrOO9aSH6Fy16gTBek2F7wfUmnax8MMDoYw.&cid=P23P3R4624640945117066128&sub=4233&conversion_id=14624640954253&app_id=4&lp_id=1518&v=tribat&stub_id=305&v_id=XIVeevXqZKxt7VsgOLF9DFI_FjPBWVrlqupvWdUcrAc.&lpp=w10*-*-*  (flash_player_setup.exe)

1 / 68      (PUP)
http://update.ads4softupdate.xyz/dl.php?sas=HbI8PZesB2uzf13vvEFBoUX5NGqibPflTStP7fu8ZXU.&cid=P23P10R4624001646351749514&sub=4175&conversion_id=14624001656990&app_id=129&lp_id=1526&v=tribat&stub_id=305&v_id=sqcXdOA28pyhR9M4ABBBvkc-DrkqkKf9fvbwomeDAec.&lpp=*-*-*  (Flash.exe)

1 / 68      (PUP)
http://update.ads4softupdate.xyz/dl.php?sas=HbI8PZesB2uzf13vvEFBoUX5NGqibPflTStP7fu8ZXU.&cid=P23P6R4623990476800424339&sub=3224&conversion_id=14623990479156&app_id=4&lp_id=1526&v=tribat&stub_id=305&v_id=kLW2STdZM1Ag6t9xh5otgCqihAZjBsrWESEsp9Ym8SY.&lpp=No match  (Flash.exe)

1 / 68      (PUP)
http://update.ads4softupdate.xyz/dl.php?sas=HbI8PZesB2uzf13vvEFBoUX5NGqibPflTStP7fu8ZXU.&cid=P23P3R4624104507349785855&sub=4175&conversion_id=14624104515031&app_id=129&lp_id=1526&v=tribat&stub_id=305&v_id=cfv-Ixs5kB6BpvkSRhAotlChy6XyWa979xvh8wsP__c.&lpp=*-*-*  (flash_player_setup.exe)

1 / 68      (PUP)
http://update.ads4softupdate.xyz/dl.php?sas=jeygx-faXrOO9aSH6Fy16gTBek2F7wfUmnax8MMDoYw.&cid=P23P13R4623840027499327710&sub=4225&conversion_id=14623840073133&app_id=10&lp_id=1327&v=tribat&stub_id=305&v_id=_3AOHV8DlFbCDgkwW6U-bHhG6YZ7d_UxEPH-1DJcmQc.&lpp=*-*-*  (Flash.exe)

herdProtect is a second line of defense malware removal platform powered by 68 anti-malware engines in the cloud. Since no single anti-malware program is perfect 100% of the time, herdProtect utilizes a 'herd' of multiple engines to guarantee the widest coverage and the earliest possible detection.